Russian government sites hacked in supply chain attack